Infoblox has informed Techzine that it will add Lookalike Domain Monitoring to its BloxOne Threat Defense solution. This feature will help to identify sites that mimic well-known brands, which can be useful in the fight against phishing and malware attacks. According to a study on these lookalike domains, which will be presented at the RSA conference, the technique is still widely used and even more advanced in nature.
CEO Scott Harrell said Infoblox is the first DNS security vendor to offer customizable protection against malicious use of lookalike domains. The feature will be part of BloxOne Threat Defense, which operates at the DNS level to detect threats that other security solutions do not see. This is to block attacks early.
Lookalike Domain Monitoring will also come with “new emerging DNS threat intelligence feeds, which provide indicators of malicious intent to stop attacks before they happen.” Infoblox focuses on SecOps and provides contextual network information to help protect against theft of the sought-after credentials.